Ibm Sterling Connect Express For Unix vulnerabilities

CVE-2023-26023 [HIGH] CWE-532 CVE-2023-26023: Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.

CVE-2021-38933 [HIGH] CWE-327 CVE-2021-38933: IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that cou IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210574.

CVE-2023-32331 [HIGH] CWE-119 CVE-2023-32331: IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote atta IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979.

CVE-2023-29260 [MEDIUM] CWE-918 CVE-2023-29260: IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 252135.

CVE-2023-29259 [MEDIUM] CVE-2023-29259: IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use o IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute. IBM X-Force ID: 252055.